Credit applications are sensitive. We treat them that way.
Our platform handles personal and financial information every day. Protecting it shapes how we build our software, manage access and operate our business.
Security measures
We use a combination of technical safeguards, secure development practices and ongoing employee training to keep personal and financial information protected.
Data Protection
We encrypt information in transit and at rest. Access is restricted by role and permissions are reviewed regularly.
Secure Development
Our development process includes peer code reviews, automated testing and separate development and production environments.
Our People
Our team completes annual security training, with background checks and confidentiality agreements in place.
Security Testing
Our internal security team conducts regular audits and develops increasingly robust automated validation.
Independently audited & tested
Our security practices are backed by rigorous independent assessments.
SOC 2 Type II
An independent auditor assesses the design and operating effectiveness of our security controls over time.
Pen Test
An independent security firm conducts regular penetration testing to validate the strength of our platform's security measures.
Privacy practices
Protecting personal information also means being responsible about how it's collected, used and shared. Our privacy practices address applicable Canadian requirements, including PIPEDA and Alberta PIPA.
Our Privacy Policy provides more details about how personal information is handled, including access and correction requests.
Hosted in Canada
Our core platform and production data are hosted in Canada. Some third-party service providers may process information in other jurisdictions, in accordance with our strict security requirements for vendors.